fix auth bug on apache